Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

2
votes
1answer
1k views

SSO with Apache and Kerberos issues

I am trying to set up SSO on my Apache web server using Kerberos so that users logged into the local domain are recognised and logged in immediately. I have followed this guide to the letter but I ...
0
votes
0answers
17 views

Apache single sign on redirecting to success login page, Django application

All I have a Django web application with relative paths url. For instance, I have www.example.com/inventory/get_item/?item_id=5 In the apache configuration I am using oracle single sign on to ...
0
votes
0answers
70 views

No single sign on ssh for Users from trusted domain

I have an Ubuntu Server 12.04 LTS machine joined to a Windows 2012 Domain (DomA) via Likewise-open. I configured likewise using the following commands domainjoin-cli join test.org <Domain ...
0
votes
1answer
36 views

Single sign on and active directory federation

Can anyone please tell me, what is the difference between active directory federation services (ADFS) and single sign on (SSO)? From a simple look at things both seem to do much the same thing in ...
1
vote
0answers
25 views

vSphere 5.1 SSO upgrade issue

I´m having issues upgrading VMware vSphere Infrastructure from 5.1.0.1123961 to 5.1.1474365. First I ran into the issue described in the VMware KB 2046318 (Installing vCenter Single Sign-On fails ...
0
votes
1answer
48 views

Citrix Netscaler 10.1 AAA Application Traffic Single Sign On

I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
-1
votes
1answer
20 views

set SAML request for Office 365 Single Sign On

i am trying to set up single sign on for office 365 for my domain using my own identity provider. i have configured the domain to get to the login page of my identity provider whenever a user types in ...
1
vote
0answers
40 views

Add single sign-on into existing web app

Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
1
vote
1answer
732 views

Can I put /etc/passwd, /etc/group and /etc/shadow on an NFS share?

OK, this may be a dumb question but I'm wondering if I can export /etc/passwd, /etc/group and /etc/shadow from an NFS server and mount those files over the local ones on the client machine. The goal ...
0
votes
0answers
33 views

bugzilla authenticate with kerberos + ldap + SSO

I want to set up bugzilla with SSO, i cannot find any good documentation on how to do this. I have managed to set up ldap login which works fine. now I have set up kerberos on apache which works fine, ...
1
vote
0answers
60 views

Windows SSO-Login only working once in Internet Explorer 11

We're about to migrate our users from Internet Explorer 8 to version 11. While testing the IIS-Windows-Authentication, I noticed that it does work, but it will only work once. I can press the ...
1
vote
1answer
117 views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
1
vote
0answers
54 views

How to authentifiate webmin user using an exiusting ldap server? [closed]

I would like to authenticates webmin user in my company's ldap. The users are all defined in the ldap but only few of them should have webmin access on a list of sites (1 to 3 on 300 sites). There ...
1
vote
1answer
75 views

Open Directory and SAML Identity Provider

Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
7
votes
4answers
6k views

How does SSO using Active Directory works where user is transparently logged in. (intranet webapp)

I'm told that it's possible to make a web application not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able to go to ...
2
votes
1answer
71 views

Getting started with active directory and cloud services

I am the 'IT guy' for a company that is rapidly growing and about to reach 100 employees. While my primary job is backend development for our websites and services; I am also tasked with setting up ...
0
votes
2answers
515 views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
0
votes
2answers
94 views

apache2.2 with mod_auth_kerb SSO: how to fallback to same directory when user can't authenticate

i implement an intranet CMS (Joomla 2.5) in a multidomain environment, logging them in with kerberos against Windows AD -> SSO. SSO with kerberos works perfect for the integrated domains, also the SSO ...
1
vote
6answers
2k views

SFTP server solution with AD Single Sign-on capabilities

I'm designing a windows client application that will retrieve files from an SFTP server. I would like to avoid forcing users to supply credentials on the client application - rather, their Windows ...
1
vote
1answer
3k views

What is the SAML Assertion Consumer URL for an AD FS 2.0 Service Provider

I am configuring a service provider to use SSO authentication. I will be using AD FS 2.0 for this. What is the URL for the SAML Assertion Consumer that I need to give to the IdP? I think it may be ...
1
vote
0answers
78 views

Linux SSO for multiple windows domains

I have successfully implemented SSO on apache for windows users in the same AD domain that the apache server is in: AD domain = example.com Linux server = linux.example.com KDC = ad.example.com I ...
0
votes
0answers
84 views

Generating XML SAML with signature using xmlsec1

I am trying generate XML SAML with signature to SSO, but I have a problem and I don't know what is wrong. I don't have experience with Linux. I generated privkey and cacert with lib openssl. Next ...
0
votes
3answers
165 views

REMOTE_USER variable without @DOMAIN suffix

I administer an application that enables single sign on with valid AD users and runs on IIS currently. For performance increase, I have a task to migrate the web layer to Apache/Php on Linux. I have ...
0
votes
1answer
19 views

Apache SSO for a service that runs as local user

I am trying to move the web layer of our app onto Apache on Centos and use mod_auth_kerb to authenticate AD users and automatically log them in the app. I have successfully joined the domain, and can ...
1
vote
1answer
429 views

Samba 4 and SSH without password

I've a question to Samba 4 and Kerberos. I've had a functional SSH with SSO. But now when I've installed Samba 4 it doesn't work and it seems, that nobody has found any solution yet. I just read, that ...
1
vote
1answer
92 views

Apache authenticate against AD - some use DOMAIN\\username, others username

I have Request Tracker setup on a Ubuntu 12.04 server. It is configured to authenticate against active directory through winbind. Here's the relevant portion of the apache2 configuration: ...
4
votes
1answer
119 views

Single Sign On and NFS permissions on Windows

Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
0
votes
1answer
104 views

SSO mod_auth_kerb with Active Directory

I have working for a long time to get Drupal 7 to perform SSO authentication to a Windows Server 2003 environment. What I have done so far: Create a user account for the linux server in Active ...
1
vote
1answer
243 views

ADFS 2.0 Best Practices

I'm having a hard time finding some good articles on best practices for ADFS. We are looking to implement SSO for less than 200 users. We plan on setting up a federated server farm (2 servers) ...
0
votes
0answers
31 views

Does mod_auth_sspi require Tomcat?

I've tried setting up mod_auth_sspi, but have not managed to get SSO working. I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
2
votes
0answers
101 views

Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients

I've inherited a system that may have never been fully integrated as it could have been. We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
-1
votes
1answer
105 views

How to integrate Question2Answer into Typo3?

Question2Answer provides the option to implement Single Sign On. I want to integrate it into an existing installation of Typo3 (for Typo3 front end users). The questions I have: Do I need a certain ...
1
vote
1answer
242 views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
0
votes
1answer
172 views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
1
vote
1answer
191 views

Alfresco with only MIT Kerberos: What authentication.chain?

I want Alfresco to authenticate users using SSO with MIT Kerberos. What authentication.chain should I use? I tried authentication.chain=kerberos1:kerberos without success. Based on this answer I ...
1
vote
0answers
24 views

Suitability of SAML for use case

A user logs into our portal - site 1; We want them to be able to click through to other sites 2 and 3 within our eco-system without having to further login - so no popup box to verify they have ...
0
votes
0answers
67 views

SSO to multiple websites from Sharepoint website

We have an intranet based on Sharepoint 2010. In this intranet we have several links to other webservers within the same Active Directory, for example a link to our Outlook Web Access site on our ...
2
votes
0answers
32 views

Need SSO, RMM w/ Mac client GP management (printers etc) from one web portal [closed]

I have a client that is looking for an all-in-one solution to manage users and computers. Preferable in the cloud or SaaS. They would like to be able to create/delete users from AD, integrate SSO ...
2
votes
1answer
153 views

Can I use Office365 or Azure AD as master record for Active Directory?

We have a small business and currently don't have a need for a domain within our office. We have a basic network and a single server running Windows Server 2008 R2 with some file shares and 3rd party ...
0
votes
1answer
22 views

Single sign-on between two UAG servers

The situation: site1.company.com is published in UAG 1 (Datacenter 1) site2.company.com is published in UAG 2 (Datacenter 2) My question: Is it at all possible to set up a single sign on between ...
1
vote
1answer
87 views

Using Kerberos only for SSO

I've installed Kerberos on the Debian machine that hosts an internal application, to be able to use it to authenticate users against our AD. This works. However, Kerberos seems to feel responsible ...
0
votes
0answers
1k views

Upgrade vCenter 5.1 to 5.5 error 29102

I'm upgrading vCenter 5.1 to 5.5. After successful upgrading of Single Sign-On service, in the next step of upgrading Web Client when it needs Single Sign-On password and Lookup Service Url it used ...
0
votes
2answers
411 views

Kerberos authentication for Git server?

I have a Git server, and I want to make it usable by all Kerberos-logged users. eg: if a user has a valid Kerberos ticket, she can start pushing to Git without having to provide any ...
4
votes
1answer
851 views

Credentials can not be delegated - Alfresco Share

I've hit a brick wall configuring Alfresco 4.0.d on Redhat 6. I'm using Kerberos authentication, it seems to be working normally, and single sign on is working on the main alfresco app itself. I've ...
1
vote
1answer
5k views

vCenter 5.1 SSO Configuration option not available in Web Client?

Problem I just finished separately installing vCenter Server 5.1. I installed the components separately but on the same machine using a local SQL 2008 R2 DB (not SQL express). Everything appears to ...
1
vote
0answers
409 views

Bad SAML Request

I'm trying to setup a web SAML login on Domino server. I received the SAML 2.0 metadata XML file from the identity provider which is Oracle Identity Federation 11g. I imported the metadata to a IdP ...
0
votes
2answers
255 views

LDAP Auth proxy adding headers according to LDAP groups

I'm trying to setup some WebSSO mechanisms, that allow my customer to authenticate people against internal Active Directory and then add secure (https) headers containing credential information. ...
0
votes
0answers
71 views

IIS8 Auth.Kerberos 401.1 after some clicks

We are using a Windows Server 2012 with IIS and want to implement a seamless sso. At the first visit the authentification with Kerberos and IE ist working, but after some clicks there (3-5) there is ...
0
votes
1answer
88 views

Unable to disable Kerberos Single Sign On (SSO)

I've been exploring Kerberos Single Sign On (SSO) to replace NTLM for a Web Application hosted internally within a Windows Domain. After creating Service Principal Names (SPN) for a test service ...
0
votes
1answer
86 views

Alfresco authentication chain for (MIT) Kerberos only? (no LDAP, no AD)

The Alfresco documentation seems to consider only LDAP or Active Directory cases. In my case, all users are in MIT Kerberos, but I don't use LDAP nor Active Directory. What authentication chain ...